Red Hat Linux Security Advisories & CVEs
5443 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-93574] HTTP request smuggling via post-digit whitespace in chunk-size parsing
HTTP request smuggling via post-digit whitespace in chunk-size parsing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-444. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat AMQ Clients; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; and 8 more. Affected products named by the advisory: Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat Build of Keycloak; Red Hat Data Grid 8; and 4 more.
Medium [CVE-2026-91202] Arbitrary file ownership change via symlink following in privileged paste
Arbitrary file ownership change via symlink following in privileged paste. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-61. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: cockpit-files.
Medium [CVE-2026-91203] Arbitrary file ownership and permission modification via symlink race condition
Arbitrary file ownership and permission modification via symlink race condition. Red Hat rates this moderate (CVSS 6). Weakness: CWE-363. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: cockpit-files.
Medium [CVE-2026-91205] Local attacker can hijack file ownership via symlink race
Local attacker can hijack file ownership via symlink race. Red Hat rates this moderate (CVSS 6). Weakness: CWE-363. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: cockpit-files.
Medium [CVE-2026-93840] Information disclosure via incorrect token ID validation
Information disclosure via incorrect token ID validation. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-787. Affected products named by the advisory: Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI).
Medium [CVE-2026-92768] Sensitive data exposure via command-line arguments
Sensitive data exposure via command-line arguments. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-214. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: cockpit-machines.
Medium [CVE-2026-92747] Sensitive Data Exposure of guest credentials via JSON argument in process list
Sensitive Data Exposure of guest credentials via JSON argument in process list. Red Hat rates this moderate (CVSS 5). Weakness: CWE-214. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: cockpit-machines.
Medium [CVE-2026-92745] Information Disclosure of RHSM Offline Token via Process Arguments
Information Disclosure of RHSM Offline Token via Process Arguments. Red Hat rates this moderate (CVSS 5). Weakness: CWE-214. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; Red Hat package: cockpit-machines.
Medium [CVE-2026-93432] io.quarkus.qute:quarkus-core: Cross-Site Scripting (XSS) and JSON Injection via Qute {#eval} Section in Quarkus
io.quarkus.qute:quarkus-core: Cross-Site Scripting (XSS) and JSON Injection via Qute {#eval} Section in Quarkus. Red Hat rates this moderate (CVSS 6.1). Weakness: CWE-79. Affected products named by the advisory: Exploit Intelligence; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apicurio Registry 3; Red Hat Build of Keycloak; and 2 more. Affected products named by the advisory: Red Hat build of Quarkus; Red Hat Fuse 7.
Medium [CVE-2026-93751] Improper UTF-8 decoding allows path traversal and CRLF injection
Improper UTF-8 decoding allows path traversal and CRLF injection. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-22.
Medium [CVE-2026-93750] Information disclosure via improper Vary header wildcard validation
Information disclosure via improper Vary header wildcard validation. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-524. Affected product named by the advisory: Red Hat Hardened Images.
Medium [CVE-2026-63445] Information disclosure via filesystem path traversal
Information disclosure via filesystem path traversal. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-22.
Medium [CVE-2026-63458] Information disclosure via query parameter authorization bypass
Information disclosure via query parameter authorization bypass. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-639. Affected product named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.
Medium [CVE-2026-64847] Denial of Service due to undrained stderr in process-pool workers
Denial of Service due to undrained stderr in process-pool workers. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-1322. Red Hat lists fixing advisory RHSA-2026:70969 with package rhaii/model-opt-cuda-rhel9:1790076498, rhaiis/vllm-rocm-rhel9:1790621713, rhaii/vllm-cpu-rhel9:1790075793, rhaii/vllm-spyre-rhel9:1790076141. Affected products named by the advisory: Red Hat AI Inference Server 3.4; Ansible Automation Orchestrator 2026; Confidential Compute Attestation; Exploit Intelligence; and 11 more. Affected products named by the advisory: Lightspeed Core; Migration Toolkit for Applications 8; Migration Toolkit for Containers; OpenShift Lightspeed; and 7 more.
Medium [CVE-2026-63349] Privilege retention in child processes due to incorrect group handling
Privilege retention in child processes due to incorrect group handling. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-648. Affected products named by the advisory: Ansible Automation Orchestrator 2026; Confidential Compute Attestation; Exploit Intelligence; Lightspeed Core; and 11 more. Affected products named by the advisory: Migration Toolkit for Applications 8; Migration Toolkit for Containers; OpenShift Lightspeed; Red Hat AI Inference Server; and 7 more.
Medium [CVE-2026-91147] Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash
Denial of Service in `cockpit-ws` due to URL-root handling without a trailing slash. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-617. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 2 more. Affected products named by the advisory: Red Hat OpenShift Dev Spaces; Red Hat package: cockpit.
Medium [CVE-2026-77301] Denial of Service via uncontrolled memory allocation
Denial of Service via uncontrolled memory allocation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-770. Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Developer Hub; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; and 6 more. Affected products named by the advisory: Red Hat Fuse 7; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4; Self-service automation portal 2; and 2 more.
Medium [CVE-2026-93579] HTTP/2 header field values are not validated by default (CR/LF/NUL passthrough)
HTTP/2 header field values are not validated by default (CR/LF/NUL passthrough). Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-1035. Affected products named by the advisory: Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; and 3 more. Affected products named by the advisory: Red Hat Build of Keycloak; Red Hat Data Grid 8; Red Hat JBoss Enterprise Application Platform 8.
Medium [CVE-2026-93685] possible unauthenticated debug/metrics endpoint via cmdfactory.NewControllerCommandConfig (confirmed exposed by engineering)
possible unauthenticated debug/metrics endpoint via cmdfactory. NewControllerCommandConfig (confirmed exposed by engineering). Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-200. Affected product named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2.
Medium [CVE-2026-93573] Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smuggling
Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smuggling. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-444. Affected products named by the advisory: Red Hat AMQ Broker 7; Red Hat AMQ Clients; Red Hat build of Apache Camel 4 for Quarkus 3; Red Hat build of Apache Camel for Spring Boot 4; and 8 more. Affected products named by the advisory: Red Hat build of Apicurio Registry 3; Red Hat build of Debezium 3; Red Hat Build of Keycloak; Red Hat Data Grid 8; and 4 more.